Vendor

Eniture technology

50 known vulnerabilities.

Products

Small Package Quotes – Worldwide Express Edition 5 LTL Freight Quotes – Worldwide Express Edition 5 Distance Based Shipping Calculator 4 LTL Freight Quotes – Unishippers Edition 3 Residential Address Detection 3 Small Package Quotes – Unishippers Edition 3 LTL Freight Quotes – FreightQuote Edition 2 LTL Freight Quotes – R+L Carriers Edition 2 LTL Freight Quotes – Day & Ross Edition 2 LTL Freight Quotes – Daylight Edition 2 LTL Freight Quotes – GlobalTranz Edition 2 Small Package Quotes – USPS Edition 2 LTL Freight Quotes – SEFL Edition 1 LTL Freight Quotes – For Customers of FedEx Freight 1 LTL Freight Quotes - TQL Edition 1 LTL Freight Quotes – SAIA Edition 1 LTL Freight Quotes – Freightview Edition 1 LTL Freight Quotes – TForce Edition 1 LTL Freight Quotes – Old Dominion Edition 1 LTL Freight Quotes – ABF Freight Edition 1 Small Package Quotes – Purolator Edition 1 LTL Freight Quotes – Estes Edition 1 Small Package Quotes – UPS Edition 1 ShipEngine Shipping Quotes 1 Standard Box Sizes – for WooCommerce 1 Small Package Quotes – For Customers of FedEx 1 Pallet Packaging for WooCommerce 1 LTL Freight Quotes – XPO Edition 1 LTL Freight Quotes – Purolator Edition 1

All Critical High Medium Low Exploited only Public exploit

50 results · Feed

High 7.5

CVE-2024-13531

ShipEngine Shipping Quotes <= 1.0.7 - Unauthenticated SQL Injection

The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the ex…

Eniture technology ShipEngine Shipping Quotes Web / CMS

Feb 12, 2025
High 7.5

CVE-2024-13475

Small Package Quotes – UPS Edition <= 4.5.16 - Unauthenticated SQL Injection

The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation …

Eniture technology Small Package Quotes – UPS Edition Web / CMS

Feb 12, 2025
High 7.5

CVE-2024-13490

LTL Freight Quotes – XPO Edition <= 4.3.7 - Unauthenticated SQL Injection

The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.7 due to insufficient escaping on the user supplied parameter and lack of su…

Eniture technology LTL Freight Quotes – XPO Edition Web / CMS

Feb 12, 2025
High 7.5

CVE-2024-13473

LTL Freight Quotes - Worldwide Express Edition <= 5.0.20 - Unauthenticated SQL Injection

The LTL Freight Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameter in all versions up to, and including, 5.0.20 due to insufficient escaping on the user supplied parameter …

Eniture technology LTL Freight Quotes – Worldwide Express Edition Web / CMS

Feb 12, 2025
Critical 9.3

CVE-2025-24667

WordPress Small Package Quotes Plugin <= 5.2.17 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injection.This issue affects Small Package Quo…

Eniture technology Small Package Quotes – Worldwide Express Edition

Jan 27, 2025
Critical 9.3

CVE-2025-24665

WordPress Small Package Quotes Plugin <= 2.4.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows SQL Injection.This issue affects Small Package Q…

Eniture technology Small Package Quotes – Unishippers Edition

Jan 27, 2025
Critical 9.3

CVE-2025-24664

WordPress LTL Freight Quotes Plugin <= 5.0.20 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows SQL Injection.This issue affects LTL Fre…

Eniture technology LTL Freight Quotes – Worldwide Express Edition

Jan 27, 2025
High 7.5

CVE-2025-22318

WordPress Standard Box Sizes plugin <= 1.6.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in enituretechnology Standard Box Sizes – for WooCommerce standard-box-sizes.This issue affects Standard Box Sizes – for WooCommerce: from n/a through <= 1.6.13.

Eniture technology Standard Box Sizes – for WooCommerce Web / CMS

Jan 21, 2025
High 7.1

CVE-2024-56301

WordPress Distance Based Shipping Calculator Plugin <= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows Reflected XSS.This issue affects Distance Based Shipping Calcu…

Eniture technology Distance Based Shipping Calculator

Jan 13, 2025
High 8.5

CVE-2024-52495

WordPress Distance Based Shipping Calculator plugin <= 2.0.23 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows SQL Injection.This issue affects Distance Based Shipping Calcu…

Eniture technology Distance Based Shipping Calculator

Nov 28, 2024